Application actions do not respect their nova policy correctly. Even if the resource returns authorizedToCreate: false the Create button is still visible and vice versa.
In this example if the user is set to Premium they should be able to create a post, if they are set to Basic they should not.
Without hard refreshing:
- Go to the USER resource and set the subscription to
Premium. - Now go back to the POST resource. Create a post. All is well.
- Now go back to the USER resource and set the subscription to
Basic. - Now go back to the POST resource. As per the
PostPolicythe Create button should not be visible. However it still is. - Now hard refresh the page and it (correctly) is no longer there.
Looking at the nova api request for the POST resource it is the correct policy data but has no impact on the front end. that is, until you hard refresh. ![Nova policy does not match actions]:(https://jmp.sh/g3AQw1h)
This was with the latest stock nova install.
Thank you for your help :)